4.3
Moyenne
CVE-2025-52620 HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability
Description
HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability. The image upload functionality inadequately validated the submitted image format.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BigFix SaaS Remediate 8.1 | premières → < 8.1.14 | 8.1.14 |
Autres CVE de BigFix SaaS Remediate
Les 5 CVE de BigFix SaaS Remediate →
CVE-2025-52622
The BigFix SaaS's HTTP responses were missing some security headers
5.4
Moyenne
CVE-2025-52618
HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability
4.3
Moyenne
CVE-2025-52619
HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure
5.3
Moyenne
CVE-2025-52621
HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning
5.3
Moyenne